Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems - Equipe SecurIty and Resilience of Information Systems Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems

Résumé

Intrusion Detection Systems (IDSs) are essential cybersecurity components. Previous cyberattack detection methods relied more on signatures and rules to detect cyberattacks, although there has been a change in paradigm in the last decade, with Machine Learning (ML) enabling more efficient and flexible statistical methods. However, ML is currently unable to integrate cybersecurity information into its inner workings. This paper introduces Cyber Informedness, a new metric taking into account cybersecurity information to give a more informed representation of performance, influenced by the severity of the attacks encountered. This metric uses a de facto standard in cybersecurity: the Common Vulnerability Scoring System (CVSS). Results on two public datasets show that this new metric validates results obtained with generic metrics. Furthermore, this new metric highlights ML-based IDSs that prioritize high performance on severe attacks, which is not visible with generic metrics. Consequently, this new metric nicely completes generic metrics by bridging the gap between ML and cybersecurity.
Fichier principal
Vignette du fichier
EICC2023-RobinDURAZ.pdf (440.98 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04159578 , version 1 (01-03-2024)

Identifiants

Citer

Robin Duraz, David Espes, Julien Francq, Sandrine Vaton. Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems. EICC 2023: European Interdisciplinary Cybersecurity Conference, Jun 2023, Stavanger, Norway. ⟨10.1145/3590777.3590786⟩. ⟨hal-04159578⟩
211 Consultations
6 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More